Municipal digital services in Ballard and Kearns faced disruptions after a security vulnerability affecting PHP prompted the precautionary removal of certain municipal website solutions from the internet. While the outages affected community development and web central sites, officials reported no evidence that any customer data has been compromised during the identified incidents.
Security Vulnerabilities Trigger Outages
The service disruptions were linked to vulnerabilities within the PHP programming language, affecting multiple components of the CivicPlus system used by local governments. In Ballard, the Municipal Websites Open solution was taken offline as a precaution. This disruption affected the Web Central sites, which include various essential municipal functions.
In Kearns, the security vulnerability also necessitated the removal of the Municipal Websites Open solution from the internet. The Kearns disruption was identified as having lasted for five hours, while the Ballard disruption was reported as ongoing for four hours at the time of the system status update.
Impact on Community Development
The outages impacted several key areas of municipal administration, specifically affecting Community Development and Mobile Field Operations. In both Ballard and Kearns, the Community Development (v4) services were reported as having been restored, though officials noted they are continuing to monitor the system to support ongoing security and stability.
Prior to the restoration of Community Development (v4), the Community Development (v3 + FMO) services were also reported as being offline as a precaution. This disruption affected the ability of users to access these specific digital tools while the security threat was being addressed.
System-Wide Service Disruptions
Beyond website access, the disruptions extended to other digital administrative tools. The NextRequest component was reported to be experiencing degraded performance in both Ballard and Kearns. This affects the functionality of the platform used by the municipalities.
Other services within the CivicPlus system, such as the Agenda and Meeting Management Essential and Select components, as well as Asset Management and various reporting tools, were listed with no incidents reported as of the most recent status updates. However, the Municipal Websites Central services, including payments and resident portals, were listed as experiencing service disruptions.
Scope of Digital Impact
The technical issues affected a wide array of components, including DocAccess, which consists of six components including the Admin Interface, Document Service, and Document Processing. While some components like the Admin Interface and Document Service showed no incidents, others remained under review or were part of the broader service disruption.
The breadth of the affected system includes the Staff Center + CivicPlus Athena, which includes the Dashboard, Chat, Settings, and Agent Settings components. Additionally, the Streamline CMS, which includes notifications, was identified as part of the broader system being monitored for stability.
Ongoing Monitoring and Security
The technical status for both Ballard and Kearns remains under close observation. While certain community development tools have been restored, the municipalities continue to monitor the system to ensure long-term security and stability. The officials emphasized that the decision to take the Web Open solution offline was a precautionary measure.
At the time of the reports, the status of various municipal services varied, with some components showing no incidents and others experiencing degraded performance. The municipalities have not reported any instances of customer data being compromised due to the PHP security vulnerability.
Future Stability Efforts
The municipalities continue to manage their digital infrastructure as they respond to the PHP-related vulnerability. The status of various components, from utility billing to recreation management, is subject to ongoing monitoring to prevent further security risks to municipal operations.
